PT-2006-4949 · Drupal · Drupal

Publicado 2006-08-14 · Atualizado 2017-07-20 · CVE-2006-4108

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Drupal versions 4.6 before revision 1.1.1.1.4.11 Drupal versions 4.7 before revision 1.13.2.5

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands.

Recommendations For versions 4.6 before revision 1.1.1.1.4.11, update to revision 1.1.1.1.4.11 or later. For versions 4.7 before revision 1.13.2.5, update to revision 1.13.2.5 or later.

Correção

Identificadores relacionados

CVE-2006-4108

Produtos afetados

Drupal

Referências · 6

• http://vupen.com/english/advisories/2006/3227 · Nota
• http://drupal.org/node/77756 · Nota
• http://securityfocus.com/bid/19441 · Nota
• http://secunia.com/advisories/21435 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-4108 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28296 · Nota